Lucene search
+L

2 matches found

osv_bit
osv_bit
•added 2026/09/29 8:43 a.m.•19 views

BIT-ENVOY-2026-73547 Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

7.5CVSS5.7AI score0.00554EPSS
SaveExploits1References10
Rows per page
Query Builder